cvedb.io
CVE-2018-12572
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2019-03-21T16:00:14.187 · Last modified 2026-06-17T01:37:59.487

Summary

Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.

Affected products

avast — free_antivirus

Does this affect you?

Add your gear to cvedb and we'll alert you only when avast ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.